See below reply ->
> If I recall correctly a similar question was asked sometime last week.
>
> One way to accomplish this would be to create two separate SQL
> connections;
> sql1 & sql2.
> sql sql1 {
> driver = "rlm_sql_mysql"
> ...
> }
> sql sql2 {
> driver = "rlm_sql_mysql"
> ...
> }
>
> Add DEFAULT check conditions to the users file to check for the IP address
> of your NAS, setting Autz-Type to either SQL1 or SQL2.
>
> DEFAULT NAS-IP-Address == 192.168.0.1, Autz-Type := SQL1
> DEFAULT NAS-IP-Address == 192.168.0.2, Autz-Type := SQL2
>
> In radiusd.conf add the appropriate Autz-Type enteries to the 'authorize'
> section, see 'Autz-Type' in the FreeRADIUS docs.
>
> authorize{
> suffix
> preprocess
> Autz-Type SQL1{
> sql1
> }
> Autz-Type SQL2{
> sql2
> }
> files
> }
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Desmond
> Rivet
> Sent: 09 July 2003 16:04
> To: [EMAIL PROTECTED]
> Subject: Re: Same User-Name, different profiles
>
>
> >>I thought I'd try reposting this under a more descriptive title :)
> >>
> >>Let's say that I have two completely different profiles, but
> they have the
> >>same User-Name.
> >>
> >>(This is not a situation that I would have thought crops up very often,
> >>but I'm reading some Cisco SSG documentation and from what I
> can tell, you
> >>can have regular user profiles, but also user "quota" profiles
> which are
> >>accessed with the same User-Name but which returns different
> attributes in
> >>the Access-Accept)
> >>
> >>Let's say you distinguish between the two different profiles in the
> >>Access-Request by the presence of one attribute, i.e. if a certain
> >>attribute is there, you want one profile; if the attribute isn't there,
> >>you want the other profile. Both profiles are returned via an
> >>Access-Accept.
> >>
> >>How would one do this sort of thing in FreeRADIUS?
> >
> >janedoeuser Auth-Type := Blah, Attribute-You-Want == Check
> > Reply-Items = Go-Here,
> > ...
> >
> >janedoeuser Auth-Type := Blah
> > Other-Reply-Items = Go-Here,
> > ...
>
> This is likely a stupid question, but....how would one do this
> with the sql
> module?
>
> I took a look at the sql.conf file. From what I can tell, you can
> configure
> the SELECT statement that FreeRADIUS uses to obtain the check items for a
> particular user name, but there doesn't seem to be a distinction between
> different "profiles", like we have in the users file. There's
> just one big
> radcheck table that is queried for check items based on whatever
> User-Name
> you like.
>
> Any thoughts?
>
> Desmond
>
> _________________________________________________________________
> Protect your PC - get McAfee.com VirusScan Online
> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
-------------------------------------------------------------------------------------------------------
This email, and any files transmitted with it, is copyright and may contain
confidential information.
The contents are intended for the use of the addressee(s) only.
Unauthorized use may be unlawful.
If you receive this email by mistake, please advise sender immediately.
The views of the author may not necessarily constitute the views of Telco Electronics
Limited.
Nothing in this mail shall bind Telco Electronics Limited in any contract or
obligation.
Telco Electronics Limited
6-8 Oxford Court
Brackley
Northants
NN13 7XY
Tel 07000 701999
Fax 07000 701777
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
